CVE-2023-1188lowCWE-404

CVE-2023-1188: low-severity vulnerability in FabulaTech Webcam for Remote Desktop

FabulaTech Webcam for Remote Desktop IoControlCode ftwebcam.sys 0x222018 denial of service

Published 06 Mar 2023 · Updated 05 Mar 2025

Follow this CVE + Monitor Webcam for Remote Desktop

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.3epss 0.4%

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0x222018 in the library ftwebcam.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222360.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

FabulaTech · Webcam for Remote Desktop

Related CVEs — FabulaTech Webcam for Remote Desktop

In the same product, most dangerous first.

CVE-2023-1186LOWFabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereferenceEPSS 0.4%CVE-2023-1187LOWFabulaTech Webcam for Remote Desktop Global Variable ftwebcam.sys denial of serviceEPSS 0.4%

References

https://drive.google.com/file/d/1_gVQtfbpywhh8Z6g4Y03Qg7UT3Aobz2e/view?usp=sharing https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1188 https://vuldb.com/?ctiid.222360 https://vuldb.com/?id.222360